
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File: 4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier: G8GtoUYSo2Fod8bvjsUydJlVkuRwH4U6ZnLZntYkyso=
Subject key identifier: 1A:45:B8:E3:5F:17:43:7A:4A:DD:F9:63:B0:79:3B:83:E2:42:EF:E2
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01A15A796B0CD2BCD971D6C88B90EEA7CF46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number: 1AE4
Signing time: Tue 20 Oct 2026 18:01:09 +0000
Manifest this update: Tue 20 Oct 2026 18:01:09 +0000
Manifest next update: Wed 21 Oct 2026 18:01:09 +0000
Files and hashes: 1: 253R_HjPAe_ULUSoVVCZut_DWoY.roa (hash: D4Z9WrfO5QDHXjS9ZWgcaTJ1VBuEVEWpyCuirpjL6iQ=)
2: 4Amcw_pQnCgUTmmioG8dHpbahno.roa (hash: 92MW6tWWkm7QMlJBGqIiuLCgDXvyb+/reqKAYQ6ekAE=)
3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: nX9iQuqElFM81xoYIG7VxpxK93Ep96J5/ZsklVms/ps=)
4: 4wWLZvDCm_Fs8RXrsh4_nX1EMD8.roa (hash: Ps9U40mkOfvPLjiWBVogaam3tFF1PxDWGlfCu6BeeCI=)
5: 7w4SlqD5_TJRCUYNtP45pq1RdHc.roa (hash: x5KSqzcfRNfCh39tqIYQzi+K7RIdwi2UYjNzfLXTpBE=)
6: ICLuLWUf8K-OPFkcJRYxqsBX-og.roa (hash: KNef4xAbXPZkefsWRYunbzCYlTuRbde30AOI76m0/d8=)
7: NRnc0MiLNgbuvfsNBN_chXpyQsY.roa (hash: C5qgrl3mdnbFvtHeaqRaus49s6OOOYlaRV1VkekoU7w=)
8: NTv7LQAS_LwWFXpfT4pp1pRzpUo.roa (hash: 6Zx0et5KoYqA0nctYCmbK2vATQghjQgESCCV6+X9DFg=)
9: NWRZ17VNSXk0NhcxLsdmMsWDMIw.roa (hash: p8n/nJxdfNWfTunhQM0WRuxDSZ2e2b9eRlp4eM3QJQM=)
10: Oj1ja8N0oxGQiS2Wy5Ssws_LwJE.roa (hash: 8Nzr/97yM1ZdxlCxAyp0o5DzDkLxP1yuux0LBIokMaw=)
11: TvvdgghGK7jE5Wdfke5NcSe8W10.roa (hash: jzahL28Bl93klMAzOc6I83k1Jer8sn+vJHe5tMFdTO4=)
12: cU0PtialT7blBe0g9qAA9y45m3s.roa (hash: qQwsFpRRdUCSG6sBnp8cTf5HUrsZ8Vc8DYuoZkHY9Hk=)
13: hHyrrGpim5kmp-rDBaJEUdz4XqI.roa (hash: IRiXUvYvmGRpX+j7hL6X93Z7tjebREZx4+/xbHMKXyU=)
14: irISjxv6hlEOs-X4Vplb5dPSU00.roa (hash: K/EihhYKr9R9rdpNfRGGLbcShi2prhZgj9Ka7TW/Gvs=)
15: k0z7MDRM9uoQRi5FCpwKZccILJg.roa (hash: dqUt+iofpv1ARMjRtWzMx/LnghSIzAFrMCJ6o7uWMng=)
16: kI6qZM_ZaitHrWvGolHhHlDVsrQ.roa (hash: Q3M/OMYn5lm9sKUydcSkDpIKl2s8dMnBBJUvs2+PkIA=)
17: kzC9EFyelmmomZF_e2XmyJabbWQ.roa (hash: oXxZIdOtBxJCe3M9KeLiBSELU0JOusil+zniChOYVuA=)
18: ovrVbVB-z8m1_IVOS4X2Q8DgTyw.roa (hash: LVLa9mYv21IVSn6z3AQa9diqzTrskMXXMQqtkiGSjNo=)
19: s2sqMucOv1FfQhEnviHe_Vm5xTs.roa (hash: 0WYejSWLXZino5j5/86RMZezTV6CmxWNOw+0wJcC1wo=)
20: uwfODHuSXZ-A23Wr5tmyEG0mjkI.roa (hash: wBzrRXxWTC037AZARRRefO3kxnGzL7xL06CRAA2tkOQ=)
21: xRqWzAI7d84_wxUFp0hDIyK_Ojo.roa (hash: GIOz+A10HOs65oGunFzUyPhZsBMSo2WwZBTkg6MNHAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:79:6b:0c:d2:bc:d9:71:d6:c8:8b:90:ee:a7:cf:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Oct 20 18:01:09 2026 GMT
Not After : Oct 21 18:01:09 2026 GMT
Subject: CN=1a45b8e35f17437a4addf963b0793b83e242efe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4c:0e:4a:1c:03:bb:1e:70:bc:3e:67:d6:20:
a4:51:77:45:d7:65:dd:23:4c:67:a7:dd:f7:7c:d4:
16:4e:26:61:3f:ba:47:85:df:4f:90:e3:fa:ed:52:
95:50:fb:14:04:58:65:f7:1c:1a:00:7a:52:85:18:
69:4e:53:5a:70:75:d8:fd:b3:51:31:64:c5:ed:86:
d4:ab:7e:9a:ab:37:ec:7a:6b:6d:0f:98:97:7a:8f:
47:4b:b4:69:e0:92:09:33:5a:a5:57:b1:3f:44:83:
03:21:95:cd:04:e2:c3:e2:0f:ee:6d:67:2b:da:e7:
a9:c8:1d:17:01:ae:cb:c5:69:62:28:83:c1:ef:18:
18:65:0a:7a:a6:76:bc:d9:3f:25:e3:4d:e7:45:2b:
14:03:55:d0:75:56:07:13:79:8e:59:e9:7c:bc:d9:
36:7e:76:e7:c2:b0:dc:60:40:fc:12:a5:ba:48:5a:
b7:2f:4d:7e:ba:54:63:1b:71:1e:e1:ca:dc:c8:b5:
69:18:dd:5d:be:7a:18:5e:d1:09:4b:6a:6d:2a:ae:
b6:d3:7f:b0:f7:2a:a5:87:dd:2c:23:4d:93:fb:ac:
f7:df:ba:57:99:07:d1:2a:21:3d:7b:7d:af:ba:5c:
2f:bc:28:6f:e0:b2:f9:9f:cc:6e:ac:b5:1a:b5:02:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:45:B8:E3:5F:17:43:7A:4A:DD:F9:63:B0:79:3B:83:E2:42:EF:E2
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1f:2f:9a:fc:11:81:43:4d:a0:17:50:99:ef:2f:2c:a1:c9:
bb:7c:37:db:85:8e:05:43:90:a3:3a:6b:32:bf:b3:a4:25:65:
3e:29:64:19:af:20:50:0d:ba:9a:b8:bb:0c:09:d1:c8:21:e7:
f3:0d:f3:d0:89:43:6d:e3:73:99:0f:0f:fc:f2:b0:6b:96:ce:
39:cb:3c:ee:b9:32:78:91:cd:59:3b:b6:4d:45:2c:7e:04:70:
88:fe:62:5a:56:9d:cc:8a:0e:05:31:3d:64:f9:17:ae:7e:8a:
1d:57:a9:79:58:9e:44:d4:aa:e6:6e:4a:9f:6d:e8:1d:d8:c9:
44:56:dd:db:df:a6:11:d3:6e:dd:78:53:10:03:54:f2:0e:54:
35:e7:c9:8b:98:a4:fd:7e:56:7d:56:0b:a2:91:8a:69:ad:c6:
b4:34:f3:a8:1d:03:5e:48:03:2a:a2:a2:bc:f7:32:1f:17:4e:
bd:92:33:eb:ce:0b:e2:e4:4e:74:5d:5b:75:69:53:df:89:1d:
ec:4a:c6:0d:5e:20:96:86:7f:73:de:fd:3e:4d:34:46:64:5a:
85:61:54:8a:1f:e8:5f:36:be:39:8b:7e:af:1e:9f:7d:2f:e5:
b0:91:2d:6c:27:81:76:4a:8e:32:77:18:ca:61:64:9d:d9:eb:
69:e4:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:33:47 2026 by rpki-client